Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/179oyMMwdAjb2hcSl9Ng9MqR3fk.roa
File: 179oyMMwdAjb2hcSl9Ng9MqR3fk.roa (raw, json)
Hash identifier: txRS0teXGJviPkRW/ZXFRSLCmxTjMpsNfcb0wCjRNVA=
Subject key identifier: D7:BF:68:C8:C3:30:74:08:DB:DA:17:12:97:D3:60:F4:CA:91:DD:F9
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018CCA2A6E9396C27882182325EB1E664405
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/179oyMMwdAjb2hcSl9Ng9MqR3fk.roa
Signing time: Tue 02 Jan 2024 12:33:47 +0000
ROA not before: Tue 02 Jan 2024 12:33:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57175
IP address blocks: 188.253.0.0/23 maxlen: 24
82.115.8.0/23 maxlen: 24
46.249.108.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 04:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:6e:93:96:c2:78:82:18:23:25:eb:1e:66:44:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:33:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7bf68c8c3307408dbda171297d360f4ca91ddf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:5b:08:fa:10:78:e2:90:dd:fd:88:03:b2:
03:a9:37:7a:77:d8:fa:56:6c:47:8e:b6:da:02:87:
ba:6d:7f:e0:31:0e:c5:73:07:36:e7:db:72:cd:87:
80:95:3b:30:6a:c5:84:47:98:49:3f:eb:6d:85:64:
d3:0e:22:69:a4:e4:d6:49:93:ea:08:c7:f8:d5:aa:
3d:86:ac:3b:85:b1:b0:d9:61:ac:a5:a4:74:7f:28:
5a:87:d8:86:a0:c9:89:bc:75:36:8b:23:70:d4:65:
3e:48:dc:51:bd:74:f7:22:f1:de:20:89:67:e6:04:
0a:f4:e3:ed:cd:56:c9:a9:0f:14:c8:02:51:06:66:
79:1e:84:7f:18:ed:16:44:1a:b1:dd:98:85:fc:94:
78:ca:cf:5c:4e:06:59:9d:a4:a1:78:ec:6d:33:62:
e8:b2:69:91:d5:c4:7e:0d:da:e8:eb:ed:8b:79:d9:
0c:d9:48:3e:74:e3:f0:75:81:c7:51:43:52:20:f8:
6e:97:b6:52:2a:bf:01:a3:5a:61:03:50:91:86:53:
c8:79:88:fd:6e:ef:ab:2a:44:71:76:50:c3:a2:50:
77:9e:36:e6:d1:ad:0a:9a:44:98:fc:da:e4:b4:4b:
96:7b:63:ae:e3:4e:48:c7:d0:72:2c:fb:f5:8a:26:
af:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BF:68:C8:C3:30:74:08:DB:DA:17:12:97:D3:60:F4:CA:91:DD:F9
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/179oyMMwdAjb2hcSl9Ng9MqR3fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.108.0/23
82.115.8.0/23
188.253.0.0/23
Signature Algorithm: sha256WithRSAEncryption
cb:7e:ad:97:25:81:3f:93:be:ab:56:13:d6:c5:b0:17:ff:e9:
b9:5f:10:50:df:65:db:9f:c9:c4:90:10:84:88:45:3c:f6:43:
cf:ed:73:ee:aa:39:02:e2:38:45:56:a7:34:5e:0a:b9:7a:4a:
ef:40:f4:d6:c5:39:df:db:02:a0:1c:b8:f9:9d:30:95:9e:6a:
3a:96:08:91:d9:05:3f:01:7f:68:cf:71:0d:9b:eb:7b:2a:09:
be:56:91:59:24:bb:33:a0:3d:ab:92:5f:e7:93:4f:1c:7b:2c:
fa:c0:d0:4c:12:bc:9a:04:fa:e1:73:83:f3:dc:11:2d:54:59:
a6:29:bf:db:c6:5a:ee:62:ae:bd:ca:86:83:1f:d4:a5:1d:e1:
00:d0:79:4f:b6:78:d3:1d:bf:b4:a3:7b:58:54:37:93:a9:19:
20:65:9f:f3:27:17:88:2d:93:bb:39:fe:5f:28:93:ff:90:00:
55:91:80:aa:ea:59:ea:1a:49:21:df:bd:3c:e9:86:50:de:f1:
b3:85:37:da:57:ba:9f:20:16:43:d4:b3:61:39:4d:e3:54:1b:
d3:d1:d9:a0:22:46:e9:65:3d:d2:af:e7:00:77:a3:3b:45:7d:
97:da:36:07:82:9b:46:74:2f:09:13:f4:1d:b1:0c:84:61:f5:
63:75:3c:02
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzKKm6TlsJ4ghgjJeseZkQFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjQwMTAyMTIzMzQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2JmNjhjOGMzMzA3NDA4ZGJkYTE3MTI5N2QzNjBmNGNhOTFkZGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS5bCPoQeOKQ3f2IA7IDqTd6d9j6
VmxHjrbaAoe6bX/gMQ7Fcwc259tyzYeAlTswasWER5hJP+tthWTTDiJppOTWSZPq
CMf41ao9hqw7hbGw2WGspaR0fyhah9iGoMmJvHU2iyNw1GU+SNxRvXT3IvHeIIln
5gQK9OPtzVbJqQ8UyAJRBmZ5HoR/GO0WRBqx3ZiF/JR4ys9cTgZZnaSheOxtM2Lo
smmR1cR+Ddro6+2LedkM2Ug+dOPwdYHHUUNSIPhul7ZSKr8Bo1phA1CRhlPIeYj9
bu+rKkRxdlDDolB3njbm0a0KmkSY/NrktEuWe2Ou405Ix9ByLPv1iiav8QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNe/aMjDMHQI29oXEpfTYPTKkd35MB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvMTc5b3lNTXdkQWpiMmhjU2w5Tmc5TXFSM2ZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLvlsAwQB
UnMIAwQBvP0AMA0GCSqGSIb3DQEBCwUAA4IBAQDLfq2XJYE/k76rVhPWxbAX/+m5
XxBQ32Xbn8nEkBCEiEU89kPP7XPuqjkC4jhFVqc0Xgq5ekrvQPTWxTnf2wKgHLj5
nTCVnmo6lgiR2QU/AX9oz3ENm+t7Kgm+VpFZJLszoD2rkl/nk08ceyz6wNBMErya
BPrhc4Pz3BEtVFmmKb/bxlruYq69yoaDH9SlHeEA0HlPtnjTHb+0o3tYVDeTqRkg
ZZ/zJxeILZO7Of5fKJP/kABVkYCq6lnqGkkh37086YZQ3vGzhTfaV7qfIBZD1LNh
OU3jVBvT0dmgIkbpZT3Sr+cAd6M7RX2X2jYHgptGdC8JE/QdsQyEYfVjdTwC
-----END CERTIFICATE-----
Generated at Fri Feb 23 05:17:01 2024 by rpki-client on console-fra.rpki-client.org